Individual skill
hetzner
Use when provisioning or hardening a Hetzner Cloud VPS: picking the plan/location (CX/CPX/CAX/CCX), bringing it up reproducibly with hcloud + cloud-init, locking down SSH, and wiring the Cloud Firewall to hand off a Docker-ready host. NOT app deploys on Coolify (that is `coolify`), NOT Dockerfiles (that is `docker`), NOT another provider (that is `digitalocean`).
skills/hetzner/SKILL.md
Source commit d9d6bb338f66cc1e23998585e580a0ea45bbcb82
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 6, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 562
- Repository last updated
- Nov 4, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- agent-skills Repository topic
- agentic-ai Repository topic
- ai-agents Repository topic
- ai-coding Repository topic
- claude-code Repository topic
- cli Repository topic
- cline Repository topic
- codex Repository topic
- coding-assistant Repository topic
- cursor Repository topic
- hetzner Declared skill tag
- vps Declared skill tag
- cloud-firewall Declared skill tag
- hcloud Declared skill tag
- ssh-hardening Declared skill tag
- cloud-init Declared skill tag
- self-hosting Declared skill tag
- devops Derived category
- devops-containers Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 10,544 bytesSKILL.mdcore · 10,544 bytesSKILL.mdcore · 10,544 bytesSKILL.mdcore · 10,544 bytesSKILL.mdcore · 10,544 bytesSKILL.mdcore · 10,544 bytesSKILL.mdcore · 10,544 bytesSKILL.mdcore · 10,544 bytesevals/README.mddoc · 1,841 bytesevals/cases.yamlasset · 3,664 bytesreferences/cloud-init.mddoc · 4,365 bytesreferences/plans-and-locations.mddoc · 2,927 bytesscripts/verify.shruns · 3,983 bytes
Read excerpt
# Hetzner — the cheap European box, made safe and reproducible
Hetzner Cloud is chosen for one reason: price/performance. A 2 vCPU / 4 GB AMD
box runs about €7.99/mo, the EU Intel line dips under €4, and EU locations
include 20 TB of egress. The risk is that "cheap" becomes "unhardened and
unmonitored" — a root-SSH box on a public IPv4 with password auth on. Your job
is to make the cheap box **safe** and **reproducible**: every server comes up
from a committed cloud-init file and a Cloud Firewall ruleset, never from
click-ops in the console. A box you can't recreate from a file isn't a box, it's
a pet.
## Decide before you create
Pick the line, then the location. Prices are post-2026-04-01 (a price adjustment